Privacy Policy
Last updated: [Date]
1. Data Controller
The controller responsible for data processing on this website is:
[Legal company name, e.g. Arcane Tactical GmbH] [Street and number] [Postal code, City] Germany
Email: desk@arcanetac.com Phone: [confirmed phone number]
[If a Data Protection Officer has been appointed, add:] Data Protection Officer: [Name, contact details]
2. General Information
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and this privacy policy.
Personal data is any information relating to an identified or identifiable natural person (e.g. name, email address, IP address). This policy explains what data we collect, how we use it, and what rights you have.
3. Hosting and Server Log Files
This website is hosted by [hosting provider name and address, e.g. “IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany”]. When you visit this website, the hosting provider automatically collects and stores information in server log files that your browser transmits:
- IP address of the requesting device
- Date and time of the request
- Browser type and version
- Operating system
- Referrer URL (the previously visited page)
- Requested page or file
This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR — our legitimate interest in the technically error-free presentation and security of our website. Log files are deleted after [number, typically 7–14] days.
[If the host is outside the EU, a section on international transfers and Standard Contractual Clauses must be added.]
4. Contact by Email or Phone
If you contact us by email or phone, your inquiry — including the personal data you provide (name, organization, contact details, content of the inquiry) — is stored and processed by us for the purpose of handling your request and any follow-up questions.
Legal basis:
- Art. 6(1)(b) GDPR, where your inquiry relates to the initiation or performance of a contract;
- Art. 6(1)(f) GDPR in all other cases — our legitimate interest in responding effectively to inquiries.
We retain this data until the purpose of the communication is fulfilled, unless statutory retention obligations (e.g. under German commercial and tax law) require longer storage.
Note on our clientele: Access to our training portfolio is restricted to verified corporate and institutional entities. As part of the verification process, we may process business contact data and information about your organization. This is done on the basis of Art. 6(1)(b) and (f) GDPR.
[If the site has or will have a contact form, add a dedicated section: what fields are collected, legal basis as above, and how the form data is transmitted and stored.]
5. Cookies
This website uses [only technically necessary cookies / cookies as described below].
Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG; they are required for the operation of the website and cannot be deactivated.
[If any analytics, marketing, or embedded third-party services set cookies, a consent banner (opt-in before the cookies are set) is legally required, and each service must be listed here with its provider, purpose, legal basis (Art. 6(1)(a) GDPR — consent), and storage duration.]
You can configure your browser to inform you when cookies are set, to accept cookies only in individual cases, or to reject them entirely. Disabling cookies may limit the functionality of this website.
6. Google Fonts
The fonts are installed locally on our server; no connection to Google servers is established and no data is transmitted to Google.
7. Social Media Links
Our website contains a link to our Facebook page. This is a simple hyperlink, not an embedded plugin — no data is transmitted to Facebook (Meta Platforms Ireland Ltd.) when you visit our website. Data is only processed by Facebook once you click the link and visit our page there; Meta’s own privacy policy then applies.
8. SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.
9. Your Rights
As a data subject, you have the following rights under the GDPR:
- Right of access (Art. 15 GDPR) — to obtain information about the personal data we process about you;
- Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected;
- Right to erasure (Art. 17 GDPR) — to have your data deleted, where no legal retention obligation applies;
- Right to restriction of processing (Art. 18 GDPR);
- Right to data portability (Art. 20 GDPR);
- Right to object (Art. 21 GDPR) — in particular to processing based on legitimate interest;
- Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time with effect for the future.
To exercise any of these rights, contact us at desk@arcanetac.com.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
[Supervisory authority of the federal state where the company is registered, e.g. “Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin” — adjust to the actual Bundesland.]
10. Data Retention
Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose for its processing no longer applies. Where statutory retention obligations exist (e.g. 6 or 10 years under German commercial and tax law for business correspondence and accounting records), data is blocked from other use and deleted after those periods expire.
11. No Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
12. Changes to This Privacy Policy
We reserve the right to amend this privacy policy to reflect changes in the law or in our data processing. The current version is always available on this page.

